Поиск уязвимостей
Количество 45
Количество 45
BDU:2023-04834
Уязвимость компонента lsi53c895a.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2023-3301
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
CVE-2023-3301
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
CVE-2023-3301
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
CVE-2023-3301
CVE-2023-3301
A flaw was found in QEMU. The async nature of hot-unplug enables a rac ...
CVE-2023-3180
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
CVE-2023-3180
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
CVE-2023-3180
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
CVE-2023-3180
CVE-2023-3180
A flaw was found in the QEMU virtual crypto device while handling data ...
SUSE-SU-2023:3015-1
Security update for qemu
ALT-PU-2024-3359
ALT-PU-2024-3359: package `qemu` update to version 8.2.1-alt1
GHSA-cp42-9j6q-v649
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
BDU:2024-04418
Уязвимость интерфейса virtio-net эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-p36c-2mv6-8m8q
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ.
BDU:2023-08901
Уязвимость функции virtio_crypto_handle_sym_req эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании
RLSA-2023:6980
Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update
ELSA-2023-6980
ELSA-2023-6980: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2023:3234-1
Security update for qemu
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-04834 Уязвимость компонента lsi53c895a.c эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6 | 0% Низкий | почти 4 года назад |
 | CVE-2023-3301 A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service. | CVSS3: 5.6 | 0% Низкий | около 3 лет назад |
 | CVE-2023-3301 A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service. | CVSS3: 5.6 | 0% Низкий | больше 3 лет назад |
 | CVE-2023-3301 A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service. | CVSS3: 5.6 | 0% Низкий | около 3 лет назад |
 | CVSS3: 5.6 | 0% Низкий | около 2 лет назад | |
| CVE-2023-3301 A flaw was found in QEMU. The async nature of hot-unplug enables a rac ... | CVSS3: 5.6 | 0% Низкий | около 3 лет назад |
| CVE-2023-3180 A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
| CVE-2023-3180 A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ. | CVSS3: 6 | 0% Низкий | больше 3 лет назад |
| CVE-2023-3180 A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ. | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
| CVSS3: 6.5 | 0% Низкий | около 2 лет назад | |
| CVE-2023-3180 A flaw was found in the QEMU virtual crypto device while handling data ... | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:3015-1 Security update for qemu | больше 3 лет назад | ||
| ALT-PU-2024-3359 ALT-PU-2024-3359: package `qemu` update to version 8.2.1-alt1 | CVSS3: 6.5 | больше 2 лет назад | |
| GHSA-cp42-9j6q-v649 A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service. | CVSS3: 5.6 | 0% Низкий | около 3 лет назад |
| BDU:2024-04418 Уязвимость интерфейса virtio-net эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.6 | 0% Низкий | около 3 лет назад |
| GHSA-p36c-2mv6-8m8q A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtio_crypto_handle_sym_req. There is no check for the value of `src_len` and `dst_len` in virtio_crypto_sym_op_helper, potentially leading to a heap buffer overflow when the two values differ. | CVSS3: 6 | 0% Низкий | больше 3 лет назад |
| BDU:2023-08901 Уязвимость функции virtio_crypto_handle_sym_req эмулятора аппаратного обеспечения QEMU, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
 | RLSA-2023:6980 Moderate: virt:rhel and virt-devel:rhel security, bug fix, and enhancement update | 8 месяцев назад | ||
| ELSA-2023-6980 ELSA-2023-6980: virt:ol and virt-devel:rhel security, bug fix, and enhancement update (MODERATE) | почти 3 года назад | ||
| SUSE-SU-2023:3234-1 Security update for qemu | больше 3 лет назад |
Уязвимостей на страницу